» 6a54fbf3-19e1-ce18-c8cf-61f68ef4f59c_1d28edfa126b31d
Overview
Analysis
File Details

6a54fbf3-19e1-ce18-c8cf-61f68ef4f59c_1d28edfa126b31d

Uninstall Tool

crystalidea.com

File name:

Publisher:

CrystalIDEA Software (signed by crystalidea.com)

Product:

Uninstall Tool

Version:

3.4.1.5400

MD5:

8dae1705b4c212ba9cafd3a17742949b

SHA-1:

e220bce3112d56af4f30060db1cf71f13012126e

SHA-256:

79d72af4cc159da56cbf19c0db9fb182b157cc870f33874908e54c89996e2572

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/17/2025 4:50:08 PM UTC (today)

File size:

3.3 MB (3,426,808 bytes)

Product version:

3.4.1.5400

Original file name:

UninstallTool.exe

Common path:

C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\6a54fbf3-19e1-ce18-c8cf-61f68ef4f59c_1d28edfa126b31d

Digital Signature

Signed by:

crystalidea.com

Authority:

Unizeto Technologies S.A.

Valid from:

1/14/2014 9:14:00 AM

Valid to:

1/13/2017 9:14:00 AM

Subject:

E=support@crystalidea.com, CN=crystalidea.com, O=crystalidea.com, C=US

Issuer:

CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:

119B09803E11C7BE685861F72F128819

File PE Metadata

Compilation timestamp:

1/23/2015 3:51:04 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

Entry address:

0x305CA9

Entry point:

E9, E8, 3D, 03, 00, 5F, C7, E6, 57, 6C, 1A, 27, F8, 16, 26, FB, 14, 79, 8E, 18, 85, 7D, 42, A5, 83, EC, 0C, 53, 56, 57, E8, 24, 02, 00, 81, 04, 24, 65, 78, 63, 68, 8B, 06, 8B, D0, E9, FA, F5, 02, 00, 9C, E9, 1B, D4, 03, 00, 87, 0C, 24, E9, 58, 6B, 02, 00, 89, 14, 24, 5A, 53, 80, E3, 03, E8, DD, BE, 03, 00, 87, 1C, 24, E9, 7A, 61, 00, 00, 89, 3C, 24, 5F, 89, 14, 24, 50, E8, B4, ED, 02, 00, B0, 47, 41, 78, E8, C4, 77, FF, FF, 5E, 8C, D6, CA, FE, 06, 90, D0, 2B, D3, 68, 6D, 18, 71, 00, E9, 9F, 33, 00, 00, E8... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.9 MB (1,988,608 bytes)

Scan 6a54fbf3-19e1-ce18-c8cf-61f68ef4f59c_1d28edfa126b31d - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.